Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa
File:                     0e339ba4-36b5-44fd-a893-6219bedac76d.roa (raw, json)
Hash identifier:          TDcXSot8BiKOdA6Zk9F+QSex/93ANQXarNb9lwoLf/c=
Subject key identifier:   0B:7B:88:54:61:B0:5A:22:0F:6E:39:CC:FB:B2:EE:96:AF:E7:C0:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AA61DEAFB2B8569379AB041C358728EFD1FFC30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa
Signing time:             Mon 07 Jul 2025 18:11:07 +0000
ROA not before:           Mon 07 Jul 2025 18:11:07 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:74c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a6:1d:ea:fb:2b:85:69:37:9a:b0:41:c3:58:72:8e:fd:1f:fc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 18:11:07 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=cf1ed5c6c1860701076263d9536cf6a50db68c77f0004f5a04fc3d7e062fb204, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:19:4c:08:6e:0a:b5:3d:e9:5a:8a:73:0c:
                    72:59:6e:7e:49:0e:1c:95:a9:b7:f5:7d:3a:4f:12:
                    5e:b9:32:ba:40:e5:30:e7:c8:f0:5d:bc:07:d2:0e:
                    47:f2:73:45:39:96:46:13:26:06:91:9a:08:b3:a6:
                    d2:94:5c:57:48:39:74:0b:27:78:93:a5:3b:b9:e4:
                    95:a3:44:4d:cc:bc:a3:84:44:2f:06:c0:91:13:97:
                    58:85:e9:28:f7:9d:88:de:b6:0b:56:8e:35:9d:de:
                    6c:a7:b3:51:87:0f:76:5e:37:8d:c1:86:a3:a5:47:
                    7a:91:cc:3b:ac:31:85:39:5d:87:47:02:48:1e:84:
                    91:d2:57:cb:4e:32:5f:06:12:26:b6:55:41:d3:b0:
                    fe:aa:42:da:22:4b:8a:15:84:f4:0e:7e:7d:02:d1:
                    66:ac:df:eb:d9:65:68:ee:1d:f1:1a:a7:c5:6c:8e:
                    3c:0e:4c:aa:d1:e5:72:c2:01:5b:82:31:b9:05:dd:
                    e0:b4:79:ac:fe:a4:53:ab:83:82:1f:7a:db:af:90:
                    cc:81:45:44:51:2a:8c:d4:dc:ee:6a:eb:5f:56:0b:
                    2c:78:14:9e:89:d1:cf:db:a5:2d:15:63:93:40:a6:
                    39:12:9e:bd:b4:c1:77:1b:70:10:fb:77:1a:ee:82:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:88:54:61:B0:5A:22:0F:6E:39:CC:FB:B2:EE:96:AF:E7:C0:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:93:55:64:c8:3d:fb:db:92:48:11:32:45:bf:95:b2:5e:
         63:19:09:94:b5:5e:dd:76:4c:ce:19:4c:a1:e5:cc:3a:55:ca:
         69:8a:1c:ed:27:24:5e:ca:24:1c:2f:83:cd:2b:e4:6c:be:71:
         e4:d6:e0:cc:db:64:eb:ed:24:b7:5b:15:aa:fd:82:9c:17:1c:
         16:9d:ca:0b:3b:a2:fc:3c:bd:03:28:8c:d1:60:8d:59:42:47:
         7c:d9:02:b2:21:fb:38:02:e5:dc:c5:0b:4c:88:13:2a:f8:00:
         e4:a8:c8:b3:cd:98:ba:c7:3b:ae:b9:ec:4a:bc:3c:4c:07:be:
         48:a5:0f:aa:51:a3:d1:1e:fe:93:7a:78:7b:00:f4:a1:6a:7b:
         96:c6:20:e3:b3:d2:6d:25:46:06:79:42:e1:27:36:19:b1:4e:
         6f:26:c2:42:e2:80:70:b1:1e:01:33:7e:aa:e4:91:4b:4c:78:
         1c:90:af:62:f2:83:d2:e3:dc:51:d7:56:93:fa:2c:c4:c4:00:
         c4:27:56:e3:44:f2:d6:ac:dd:8a:34:44:be:2b:44:c5:9d:5c:
         9b:b0:8d:51:72:26:81:9c:60:2a:88:99:d8:70:8f:3a:97:d2:
         4b:0a:d3:bb:de:31:7b:26:c7:6d:79:a6:17:e4:c2:9c:93:5f:
         cc:1f:c0:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:07:42 2025 by rpki-client